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1.  Objectives 

Objective  1  :  To  construct  a  quantum  algorithm  to  determine  “ Whether  or  not  a  function  is 
evenly  distributed ”  in  quantum  polynomial  time  without  initialization. 

A  function  / :  ZN  ZM  is  called  evenly  distributed  if  it  is  many-to-one  and  onto  an  evenly 
spaced  range.  In  more  detail,  the  domain  of/ ,  ZN  is  mapped  onto  a  subset  of  K  of  ZM  which  is 
evenly  spaced  elements  in  the  range  ZM  with  constant  separation  M  /  K  ,  where  K  <  M,  N . 

We  construct  quantum  algorithms  which  can  detennine  whether  or  not  a  function  is  evenly 
distributed  efficiently  without  initialization  of  the  auxiliary  register  which  is  usually  needed  in 
quantum  computational  algorithms. 

Objective  2  :  “ The  functional  evaluation  oracle ”  can  be  constructed  from  the  functional  phase 
transform. 

On  a  quantum  computer,  a  function  / :  ZN  —>  ZM  is  evaluated  by  the  function  evaluation  oracle 
that  computes  |  x)+  |  y)  — >|  x)+  \  y  ©  / (x)> ,  where  the  first  quantum  register  is  called  the  control 
register  and  the  second  register  is  called  the  auxiliary  or  ancillary  register. 

It  has  been  shown  that  the  quantum  functional  phase  transform  can  be  constructed  from  the 
quantum  functional  evaluation  oracle  without  initialization  of  auxiliary  registers.  However,  the 
converse  has  not  been  proven  yet. 

Objective  2  is  to  show  the  converse  of  the  previous  result.  That  is.  The  function  evaluation  oracle 
can  be  shown  to  be  constructed  from  the  functional  phase  transform  that  changes  the  phase  of  each 
qubit  selectively. 

2.  Status  of  Effort 

It  was  not  so  trivial  to  construct  unitary  operations  by  which  the  interference  pattern  on  the  phases 
for  both  evenly  distributed  functions  and  the  others.  So  it  was  somewhat  needed  to  restrict  the 
domain  of  evenly-distribution  functions  to  Z2  (that  is,  Boolean  functions)  and  to  analyze  the  n  -th 
root  of  unity  produced  by  the  quantum  Fourier  transform.  Furthermore,  we  also  simplified  the 
problem  of  evenly-distribution  function  to  be  the  problem  of  evenly  balanced  function  on  which  we 
have  constructed  a  quantum  algorithm  which  can  solve  the  problem  in  polynomial  time.  Based  on 
this  result  we  have  constructed  an  initialization-free  quantum  algorithm  that  can  determine  “whether 
a  function  is  evenly  balanced  or  not”  in  quantum  polynomial  time.  Then  we  have  extended  the 
range  of  the  function  in  order  to  make  it  to  be  an  evenly  distributed  one. 

3.  Abstract 

We  generalized  quantum  algorithm  distinguishes  a  wider  class  of  functions  promised  to  be  either 
constant  or  many  to  one  and  onto  an  evenly  spaced  range,  so-called  a  evenly-distributed  function. 
As  the  original  DJ-algorithm,  the  generalized  algorithm  solves  this  problem  using  a  single 
functional  evaluation. 

In  spite  of  the  incredible  computing  power  of  quantum  computer,  it  has  been  demanded  to  use  a 
certain  number  of  quantum  registers  in  a  specific  state  and  the  extra  operations  to  initialize  the  state 
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of  the  registers.  However,  it  would  help  a  lot  to  reduce  the  storage  and  operations  if  one  can  use  any 
arbitrary  unknown  quantum  state  that  might  be  in  the  process  of  other  quantum  computer  in  order 
to  operate  one’s  own.  So  we  consider  the  problem  of  distinguishing  constant  and  evenly  balanced 
functions  and  present  a  quantum  algorithm  for  this  problem  that  does  not  require  any  initialization 
of  an  auxiliary  register  involved  in  the  process  of  functional  evaluation  and  after  solving  the 
problem  recovers  the  initial  state  of  an  auxiliary  register.  Based  on  this  approach,  we  have 
investigated  and  present  some  algorithmic  technique,  in  which  a  single  auxiliary  register  in  an 
arbitrary  unknown  state  is  sufficient  to  implement  the  iterative  procedure  that  is  usually  necessary 
in  quantum  computations  and  recover  the  auxiliary  register  untouched.  The  technique  is  applicable 
to  the  most  case  of  quantum  algorithms  that  give  us  an  exponential  speed-up  and  this  is  far  beyond 
our  original  objectives.  The  new  algorithmic  technique  can  be  applied  to  any  case  of  hidden 
subgroup  problems  if  the  based  group  is  commutative  or  not  including  period  finding  and  Simon 
problems.  Since  most  known  applications  of  the  QFT  can  be  considered  as  a  generalization  of 
finding  unknown  period  of  a  periodic  function(for  example,  Shor's  factoring  algorithm[l]  and 
Hallgren’s  more  recent  algorithm  for  solving  Pell's  equation) [2],  the  initialization-free  technique 
could  be  applied  to  a  lot  of  implementations  of  quantum  algorithms. 

3.1  Research  Accomplishments 

The  Initialization-free  generalized  Deutsch-Jozsa  type  quantum  Algorithms 

We  generalized  the  well-known  Deutsch-Jozsa  (DJ)[3]  problem  to  the  tasks  of  distinguishing 
between  constant  functions  and  so-called  evenly  distributed  and  evenly  balanced  functions, 
respectively.  While  any  classical,  deterministic  black-box  algorithm  for  the  generalizations  requires 
exponentially  many  function  calls  in  the  input  length,  the  quantum  algorithms  we  present  here  only 
need  one  or  two  such  calls.  The  quantum  circuit  for  the  problem  with  evenly  balanced  function  does 
not  even  require  its  auxiliary  registers  to  be  initialized. 


We  first  briefly  recall  the  original  DJ  problem  [3].  The  input  is  a  function  / :  Z"  — >  Z2  computed 
by  a  black-box  which  is  guaranteed  to  fulfill  the  following  promise. 

‘Either  /  is  a  constant  function,  (i.e.,  /(x)  =  0  for  all  x  or  /(x)  =  1  for  allx),  or  /  is  balanced, 
(i.e.,  /(x)  =  1  for  exactly  half  of  the  inputs)’.  Deutsch  and  Jozsa  showed  that  this  promise  problem 
is  solvable  by  a  quantum  circuit  using  only  one  invocation  of  a  black-box  for/,  which  carries  out 
the  unitary  transformation 

I  x>®  |  y)  — » |  x>®  \  y®  f  (x)) , 

where  x  e  Z"_  and  y  e  Z2 . 


The  whole  circuit  realizes  the  sequence  of  transformations 

|  0")®  |  0)  H'a'""  >H®n  |  0)  ®H  |  0) 

l°> 

V1  xgZj 

Eh r*/w 

^  yeZ^  xeZj 


H 


x)®H  |0>. 
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Where  II  is  the  1 1 adamard  transform  on  a  single  qubit,  |  0")  denotes  the  all-zero  vector  of  length  n  , 
and  x-y  is  the  inner  product  of  the  vectors  x  and  y  on  Z" .  The  circuit  requires  an  n  -qubit 
register  containing  the  input  for  /  and  one  auxiliary  qubit  for  the  function  value.  The  measurement 
of  the  n  -qubit  register  after  carrying  out  the  above  transfonnation  yields  |  0")  with  certainty  if  the 
function  is  constant  and  some  other  vector  if  it  is  balanced. 

The  two  generalizations  of  the  DJ  problem  considered  here  are  as  follows. 

(1)  Problem  GDJ-ED  (generalized  Deutsch-Jozsa  for  evenly  distributed  functions). 

The  input  is  a  function  / :  Z  v  ->  ZM  which  is  either  constant  or  evenly  distributed, 

i.e.)  There  is  an  integer  K  dividing  M  and  N  and  another  integer  t  such  that 

(i)  The  image  of  /  is  equal  to  ( M/N)j  +  t  j  =  0,...,K-l 

(ii)  The  function  is  (N  /  K)  -to-one 

(2)  Problem  GDJ-EB  (generalized  Deutsch-Jozsa  problem  for  evenly  balanced  functions). 

The  input  is  a  function  /  :  Z  v  ->  Zu  which  is  either  constant  or  evenly  balanced, 

i.e.)  For  half  of  all  output  values  y  off ,  the  parity  of  all  bits  in  the  representation  of  y  as  a 
vector  overZ-T  ,  m  =  [log M] ,  is  equal  to  1. 

From  now  on,  we  assume  for  simplicity  that  N  =  2"  and M  =  2"' .  We  may  identify  values  from 
Zv  and  ZM  with  vectors  from  Z"  and  Z2m . 

We  first  discuss  the  quantum  algorithm  which  can  solve  the  problem  GDJ-ED  efficiently. 

Note  that  the  original  DJ  algorithm  encodes  the  values  of  /  into  a  sum  of  powers  of  -1,  which  is  a 

square  root  of  unity  inZ2  and  this  sum  finally  appears  in  the  amplitude  of  |  0") .  Then  due  to  the 
properties  of  the  roots  of  unity,  the  sum  cancels  out  if  the  function  under  consideration  is  balanced. 
The  idea  in  the  algorithm  for  GDJ-ED  is  to  compute  a  sum  of  M  -th  roots  of  unity  overZM  instead 

of  a  square  root  of  unity  inZ2 .  Instead  of  the  standard  black-box  in  the  original  DJ  algorithm,  a 
black-box  computing  the  transformation 

lx)  U'f  >a)f{x)\x ) 

is  used,  where  <x>:=  e2ra,M  .  This  black-box  operation  is  again  sandwiched  into  two  applications  of 
the  Hadamard  transform  on  n  -qubits,  as  in  the  original  DJ-problem.  The  final  state  computed  by 
the  new  algorithm  is  given  by 

fz  Eh r-»/wiy). 

^  xeZ^f 

For  a  constant  function / ,  the  amplitude  of  |  0")  in  this  sum  is  <z>/<0) ,  i.e.,  the  result  is  observed  with 
certainty  in  a  measurement  of  the  n  -qubit  register.  Due  to  the  properties  of  the  roots  of  unity,  the 
amplitude  is  equal  to  0  if  /  is  evenly  distributed,  and  thus,  a  result  different  from  |  0")  is  observed. 
Altogether,  the  algorithm  solves  the  problem  GDJ-ED. 

Here,  we  present  another  algorithm  which  works  with  a  black-box  analogous  to  the  standard  one, 
realizing  the  transfonnation 
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|  x>0  |  y)  ►  |  x>0  |  v  +  fix)) 

where  x  e  ZN ,  y  e  ZM  and  ‘+’  stands  for  the  addition  modulo  M  . 

This  second  algorithm  requires  an  auxiliary  register  of  [logM] -qubits  which  is  initialized  with  the 
all-ones  vector,  |  i0[logM])  it  also  needs  to  apply  the  black-box  only  once. 

Now,  we  consider  the  quantum  algorithm  which  can  solve  the  problem  GDJ-EB  using  any 
arbitrary  mixed  quantum  state  as  the  auxiliary  register  and  recovering  it  at  the  end  of  algorithm 
without  any  deformation.  The  algorithm  uses  an  n  -qubit  register  initialized  by  |0")  and  an  in  - 
qubit  auxiliary  register  which  is  assumed  to  be  in  an  arbitrary  pure  state  |  T) .  On  these  registers,  the 
algorithm  carries  out  the  sequence  of  transformations 

H9n®  Im ,  Uj ,  /„  0  rx@m ,  Uj ,  /„  0  ,  H®n  0 Im 

in  this  order,  where  I .  denotes  the  identity  operation  on  j  qubits  and 

(\  0  ^ 

CT'=lo  -1/ 

The  black-box  operation  U®  on  n  +  m  qubits  is  defined  as 

|x)0|y)  -H  x)0|  y®f(x)) 

where  reZ”  and  y  e  Z"‘  and  ‘  ©  ’  denotes  the  bitwise  exclusive-or,  i.e.,  the  addition  in  Z"' . 

Then  it  can  be  shown  that  the  final  state  obtained  by  these  transformations  is 

X(-1>w/wi*>®i'f,> 

^  yeZ%  xgZ% 

where  p  :  Z"!  — >  Z2  means  the  ‘parity  function’ ,  i.e.,  /Tfx, , . . . ,  xm ))  =  x1  + . . .  +  xm  (mod  2)  for  any 
(x,,...,xm)eZ2m. 

Similarly  with  the  original  DJ-problem,  constant  and  evenly  balanced  functions  can  now  be 
distinguished  by  a  measurement  of  the  first  n  -qubits.  Furthermore,  in  tenns  of  ‘purification’,  the 
algorithm  also  works  for  arbitrary  initial  states  (i.e.,  also  mixed  ones)  in  the  auxiliary  register. 

The  Initialization-free  quantum  Algorithms  for  finding  hidden  subgroup  structure 


(Simon  problem  and  finding  unknown  period) 
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We  have  constructed  a  quantum  algorithm  that  can  solve  Simon’s  problem[4]  in  polynomial  times 
with  allowing  any  arbitrary  impure  or  even  the  completely  mixed  state  as  the  auxiliary 

register  and  turn  it  back  without  any  deformation  .  The  cost  of  the  algorithm  is  essentially  one  extra 
evaluation  of  U  ,  within  the  circuit  and  the  ability  to  choose  random  classical  bit-strings  on  each 

run.  Moreover,  replacing  the  Hadamard  transforms  in  the  algorithm  for  Simon’s  problem  with 
Quantum  Fourier  Transforms  (QFTs),  it  is  also  possible  to  similarly  modify  the  usual  quantum 
period- finding  algorithm  [1]  to  exploit  fully  mixed  auxiliary  registers. 

A  brief  description  of  the  algorithms  is  following. 

First,  we  note  that  there  exists  an  exact  quantum  polynomial-time  algorithm  for  the  Simon 
problem[5].  However,  we  here  deal  with  the  original  Simon  algorithm  which  is  polynomial-time  in 
the  expected  sense. 

For  convenience,  we  use  the  following  notations.  Let  G  =  |z",ffi}  be  a  group  under  the  binary 
operation  ©  ,  which  is  the  bitwise  XOR  operation.  For  a  subset  A  of  |  G  \ ,  let  |  A  \  denote  the 
cardinality  of  A . 

We  define  a  bilinear  map  GxG  — »  Z2  such  that 

xy  =  x0y0  ©  •  •  •  ©  xn_xyn_x  with  x  =  (x0 ,-  •  ■,  x„_, ) ,  y  =  (y0 ,•  •  •,  yn_x ) 

For  a  subgroup  H  of  G  ,  let  H+  =  |  x  e  G  \  xh  =  0  for  all  h  eH  j  denote  the 
orthogonal  subgroup  of  H  . 

We  remark  that  the  quotient  group  G/H  is  well-defined  since  G  is  an  abelian  group. 

Let  / :  G  — >  G  be  an  arbitrary  two-to-one  map  such  that  /(x)  =  /(y)  if  and  only  if  x  ©  y  e  H  where 
H=  {0,  h}  is  a  subgroup  of  G  for  some  non-zero  h  in  G  .  Then  the  Simon  problem  is  to  find  the 
subgroup  F[ ,  that  is,  to  determine  the  value  of  h. 

The  original  Simon  algorithm  is  as  follows: 

(i)  Prepare  |  o®'!  ^  ®  |  o  '"  ^  ,  (ii)  Apply  Wn  ®  I ,  where  Wn  is  the  n-qubit  Walsh-Hadamard 
transform,  (iii)  Apply  Uf,  (iv)  Apply  Wn®  I  . 


Then  the  resulting  state  is  |©) 


—  ^  X(-')lk)  ®  |/(x))  •  If  we  measure  the  first  n-qubit 

G  yeH  x'eGIH 


state,  then  for  each  y  e  H+  ,  the  probability  with  which  we  obtain  y  as  the  outcome  is 


Thus,  after  expected  0{n)  repetitions  of  this  procedure,  at  least  n  linearly  independent  values  of  y 
can  be  collected  so  that  the  nontrivial  h’  is  uniquely  detennined  by  solving  the  linear  system  of 
equations  h'y=0  and  thus  we  have  h—h  as  required. 

Now  the  initialization-free  quantum  algorithm  for  the  Simon  problem  is  of  the  following  forms. 

First,  consider  the  following  quantum  algorithm: 
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(i)  Prepare  an  n-qubit  state  in  the  state  1 0)  as  the  control  qubits  and  an  n-qubit  state  in  an  arbitrary 
pure  state  \y/)  =  ^  ak  |  k )  as  the  auxiliary  qubits,  (ii)  Apply  Wn®  I ,  (iii)  Apply  U  f  ,  (iv)  Choose  a 

k 

random  n-bit  string  w  =  (w0  ,•  •  •,  wn  , )  and  apply  Sw  =  a"’0  ®  •  ■  ■  0  a''"  on  the  n-qubit  auxiliary 
qubits.  (1 0  Sw  ),  (v)  Apply  Uf  ,  (vi)  Apply  /  0  Sw  ,  (vii)  Apply  Wn  0  /  . 

Then  the  expect  probability  of  obtaining  a  state  y  e  H  is  exactly  same  with  that  of  original 
Simon  algorithm. 

In  case  when  the  quantum  states  we  are  dealing  with  are  mixed  state,  it  is  also  possible  to 
construct  a  super  operator  (more  general  form  of  quantum  operation)  which  performs  the 
initialization-free  Simon  algorithm  by  means  of  the  unitary  operators  used  above. 

Similarly,  we  can  present  the  initialization-free  quantum  algorithm  for  the  period-finding 
problem.  Let  /  :  Z2„  — >  Zr,  be  a  periodic  function  with  unknown  period  T. 

Instead  of  Hadamard  transformation  in  initialization-free  Simon  Algorithm,  we  use  Quantum 
Fourier  Transform  F  on  Zv,  and  an  m-qubit  unitary  operation  Uw\yj  e2mwyim |  -  yj  depending 

on  a  random  777-bit  string  w  =  (vv0,-  •  •,  wn  , )  .  That  is,  (i)  Prepare  an  n-qubit  state  in  the  state  ())  as 
the  control  qubits  and  an  /n-qubit  state  in  an  arbitrary  pure  state  1//)  =  ^  ak  |  k'j  as  the  auxiliary 

k 

qubits,  (ii)  Apply  Fn  0 1 ,  (iii)  Apply  Uf ,  (iv)  Apply  I  ®Uw,  (v)  Apply  Uf ,  (vi)  Apply  I®UW, 
(vii)  Apply  Fn®I . 

Then  again,  it  is  quite  routine  to  see  that  the  expect  probability  of  obtaining  a  state  |  y'j  from 

which,  we  can  get  the  information  of  the  unknown  period  is  exactly  same  with  that  of  original 
period-finding  algorithm.  The  super  operator  for  the  case  of  mixed  state  can  be  also  constructed  by 
the  unitary  operators  used  above. 

3.2  Significance  to  the  Field 

(1)  The  limitation  on  the  size  of  quantum  computers  makes  it  important  to  reuse  qubits  for  auxiliary 
registers.  However,  by  the  algorithmic  technique  we  present  here,  any  arbitrarily  mixed  state  can  be 
used  as  the  auxiliary  qubits,  and  furthermore  it  can  be  fully  recovered  after  completing  the 
computations  so  that  the  independent  processes  of  several  quantum  computers  can  share  auxiliary 
registers.  Furthermore,  the  removal  of  the  preparation  in  a  certain  pure  state  as  the  initial  state  of  the 
auxiliary  register  and  full  recovery  of  the  original  state  can  make  it  possible  to  reuse  the  recovered 
one  by  employing  it  in  any  other  computations 

A  single  preparation  of  the  auxiliary  qubits  in  an  arbitrarily  mixed  state  is  sufficient  to  implement 
the  iterative  procedure  that  is  usually  necessary  in  quantum  computation  and  that  means  an 
immense  reduction  of  the  storage  and  operations  in  quantum  computing. 

(2)  It  is  assumed  that  most  quantum  algorithms  require  some  initialization  at  start-up,  which  is  to 
prepare  a  certain  pure  state  as  an  initial  state.  However,  in  experimentally  realizable  proposals  for 
the  implementation  of  quantum  algorithms,  it  may  be  technically  difficult  to  prepare  and  maintain 
the  initial  pure  state.  Especially,  the  nuclear  magnetic  resonance  (NMR)  system  is  typically  applied 
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to  physical  systems  in  equilibrium  at  room  temperature.  This  means  that  the  initial  state  of  the  spins 
is  nearly  completely  random,  that  is,  it  is  difficult  to  prepare  pure  quantum  states  of  nuclear  spins  in 
NMR  systems.  So  our  result,  by  which  the  initializing  steps  of  a  certain  pure  state  can  be  removed 
and  any  initial  state  can  be  recovered,  would  help  a  lot  to  avoid  such  an  effort  in  present-day 
experimental  implementations  of  quantum  computation. 

3.3  Relationship  to  the  Original  Goals 

The  original  goal  was  to  construct  quantum  algorithms  which  can  determine  certain  properties  of 
given  mathematical  functions  in  a  polynomial  time  without  initializing  the  input  quantum  state. 

That  is,  quantum  algorithms  which  determines 

1 .  Whether  a  Boolean  function  is  balanced  or  not 

2.  Whether  a  function  is  evenly  balanced  or  not 

3 .  Whether  a  function  is  evenly  distributed  or  not 

in  a  polynomial  times  without  the  initialization  of  the  input  state. 

As  the  result  of  this  research,  we  have  accomplished  all  the  contents  of  our  original  goals  and 
furthermore,  we  have  constructed  a  systematic  method  to  construct  efficient  quantum  algorithms 
solving  period-finding  problem  and  Simon’s  problem  without  any  initialization  of  the  auxiliary 
register. 

It  can  be  also  shown  that  our  new  method  can  be  applied  to  various  kinds  of  so  called  ‘ hidden 
subgroup  problems'  to  which,  many  problems  known  to  be  hard  classically  have  some  reductions. 
Since  most  of  known  “exponentially  fast”  applications  of  the  Quantum  Fourier  transform  (QFT) 
can  be  considered  as  a  generalization  of  finding  unknown  period  of  a  periodic  function,  the 
existence  of  these  quantum  algorithms  implies  that  any  initialization  of  the  auxiliary  qubits  may  be 
unnecessary  in  many  quantum  algorithms. 

4.  Personnel  Supported 
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auxiliary  qubits,  Phys.  Rev.  Lett.  95,  080504  (2005);  Dong  Pyo  Chi,  Jeong  San  Kim  and  Soojoon 
Lee,  Quantum  algorithms  without  initializing  the  auxiliary  qubits  ,  quant-ph/0504173. 
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(4)  NATO  Advanced  Study  Institute:  Physics  and  Computer  Science,  Cargese,  Corsica,  France,  Oct. 
2005. 

(5)  SNU-HU  3rd  Joint  Symposium  on  Mathematics,  SNU,  Seoul,  Korea,  Oct.  2005. 
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6.2  Application  Areas 

-  Symmetric  cryptography 

Since  it  is  essential  to  search  evenly  distributed  functions  (which  are  also  called  regular  function) 
in  classical  symmetric  cryptography  to  design  secure  block  ciphers,  our  algorithm  can  be  used  in 
this  procedure. 

-  Complexity  class 

New  quantum  algorithms  that  are  exponentially  faster  than  any  classical  algorithms  can  be 
introduced  and  our  work  can  enlarge  some  class  of  quantum  computational  complexity. 

-  Present-day  experimental  implementations  of  quantum  computation 

The  experimentally  realizable  proposals  for  the  implementation  of  quantum  algorithms,  it  may  be 
technically  difficult  to  prepare  the  initial  pure  state  which  has  been  considered  to  be  necessary. 

More  specifically,  in  experimental  preparation  of  quantum  states  by  means  of  the  nuclear  magnetic 
resonance  (NMR)  system,  it  is  known  to  be  difficult  to  prepare  pure  quantum  states  of  nuclear  spins 
in  NMR  systems.  Hence,  it  would  be  a  lot  helpful  to  use  our  method  of  quantum  algorithms  which 
can  be  efficiently  performed  even  though  the  initial  states  or  some  parts  of  them  are  not  in  a  specific 
pure  state.  Furthermore,  since  the  parts  of  the  initial  state  remain  intact  even  after  the  computation, 
the  parts  could  be  reused  in  any  other  computations,  which  would  save  a  large  amount  of  the 
preparation  cost  in  actual  physical  implementation  of  quantum  algorithms. 

7.  New  Discoveries,  Inventions,  or  patent  disclosures 

None 
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In  this  Letter,  we  construct  the  quantum  algorithms  for  the  Simon  problem  and  the  period-finding 
problem,  which  do  not  require  initializing  the  auxiliary  qubits  involved  in  the  process  of  functional 
evaluation  but  are  as  efficient  as  the  original  algorithms.  In  these  quantum  algorithms,  one  can  use  any 
arbitrarily  mixed  state  as  the  auxiliary  qubits,  and  furthermore  can  recover  the  state  of  the  auxiliary  qubits 
to  the  original  one  after  completing  the  computations.  Since  the  recovered  state  can  be  employed  in  any 
other  computations,  we  obtain  that  a  single  preparation  of  the  auxiliary  qubits  in  an  arbitrarily  mixed  state 
is  sufficient  to  implement  the  iterative  procedure  in  the  Simon  algorithm  or  the  period-finding  algorithm. 

DOI:  10.1 103/PhysRevLett.95.080504  PACS  numbers:  03.67.Gt,  03.65.Ta 


Quantum  computational  algorithms  can  be  executed  in 
parallel  on  superpositions  of  exponentially  many  input 
states,  and  their  outcomes  can  be  properly  measured  by 
virtue  of  quantum  interference.  These  enable  exponential 
speedups  in  the  solutions  of  certain  problems  and  allow 
one  to  distinguish  between  the  quantum  computational 
complexity  classes  and  the  classical  ones  [1-10], 

It  is  assumed  that  most  quantum  algorithms  require 
some  initialization  at  start-up,  which  is  to  prepare  a  certain 
pure  state  as  an  initial  state.  However,  in  experimentally 
realizable  proposals  for  the  implementation  of  quantum 
algorithms,  it  may  be  technically  difficult  to  prepare  the 
initial  pure  state.  Especially,  the  nuclear  magnetic  reso¬ 
nance  (NMR)  system  is  typically  applied  to  physical  sys¬ 
tems  in  equilibrium  at  room  temperature.  This  means  that 
the  initial  state  of  the  spins  is  nearly  completely  random, 
that  is,  it  is  difficult  to  prepare  pure  quantum  states  of 
nuclear  spins  in  NMR  systems.  Hence,  it  would  be  inter¬ 
esting  whether  quantum  algorithms  can  be  efficiently  per¬ 
formed  even  though  the  initial  states  or  some  parts  of  them 
are  not  in  a  specific  pure  state.  If  it  would  be  possible,  then 
the  technical  difficulty  could  be  settled  to  a  certain  extent, 
and  furthermore  if  the  pails  of  the  initial  state  would 
remain  intact  even  after  the  computation,  then  the  parts 
could  be  reused  in  any  other  computations.  We  call  such  a 
quantum  algorithm  the  initialization-free  quantum  algo¬ 
rithm  when  any  quantum  state  can  be  used  as  the  auxiliary 
(target)  qubits  involved  in  the  functional  evaluation  |x>® 

I  v)  >->  |x)  ®  |y  +  f(x))  for  a  given  function  /,  and  it  can  be 
recovered  after  the  computation. 

In  the  initialization-free  quantum  algorithms,  which  are 
implemented  without  initializing  and  deforming  the  state 
of  the  auxiliary  qubits,  any  qubits  (which  might  contain 
some  other  useful  information)  can  be  temporarily  used  as 
the  auxiliary  qubits,  and  the  initial  state  of  the  auxiliary 
qubits  can  be  recovered  at  the  end  of  the  computation.  Thus 
we  can  compose  the  auxiliary  qubits  of  any  qubits  regard¬ 
less  of  whether  (hey  are  entangled  with  others  or  are  being 
used  in  another  computational  process.  Furthermore,  in  the 


case  of  iterative  algorithms,  in  which  one  needs  to  perform 
the  algorithm  several  times  to  solve  given  problems,  the 
initialization-free  quantum  algorithms  can  be  implemented 
with  the  same  auxiliary  qubits  repeatedly,  while  the  origi¬ 
nal  iterative  algorithms  require  the  initial  auxiliary  qubits 
of  a  certain  pure  state  at  each  repetition. 

There  have  been  a  few  research  works  related  to  the 
initialization-free  quantum  algorithms.  Biham  et  al. 
[1 1,12]  have  generalized  Grover’s  algorithm  [6]  by  allow¬ 
ing  for  an  arbitrary  initial  amplitude  distribution,  and  have 
shown  that  Grover’s  algorithm  (or,  a  large  class  of  Grover- 
type  algorithms)  is  robust  against  modest  noise  in  the 
amplitude  initialization  procedure.  Parker  and  Plenio  [13] 
found  that  one  pure  qubit  and  an  initial  supply  of  logi/V 
qubits  in  an  arbitrarily  mixed  state  are  sufficient  to  imple¬ 
ment  Shot’s  quantum  factoring  algorithm  [5]  efficiently, 
where  the  idea  of  using  one  pure  qubit  and  other  mixed 
qubits  as  the  initial  state  was  first  introduced  by  Knill  and 
Laflamme  [14].  Their  result  implies  that  the  controlled 
unitary  transformations  in  Shot  ’s  algorithm  can  be  imple¬ 
mented  without  any  initialization  of  the  auxiliary  qubits, 
while  the  auxiliary  qubits  cannot  be  left  in  the  initial  state. 
Subsequently.  Chi  et  al.  [15]  have  presented  a  quantum 
algorithm  to  implement  an  oracle  computing  |.r)  >-» 
e2wiftx)/M jjf)  for  f-j_N  — »  J_M  by  making  use  of  an  oracle 
of  the  form  |.v)  ®  |y)  >-»  |x)  ®  |y  -1-  f(x))  without  setting  the 
auxiliary  qubits  to  a  definite  state  before  the  computation, 
and  have  shown  that  generalized  Deutsch-Jozsa  algorithms 
can  be  implemented  without  any  initialization  of  the  aux¬ 
iliary  qubits  when  an  oracle  computing  'Uf. |x)®  |y)>-» 
|x)  ®  |y  +  fix))  is  employed. 

In  this  Letter,  we  deal  with  two  problems,  the  Simon 
problem  [4]  and  the  period-finding  problem  [5],  which  can 
be  solved  efficiently  by  the  quantum  computer,  and  present 
the  initialization-free  quantum  algorithms  for  these  prob¬ 
lems.  Since  most  of  known  “exponentially  fast”  applica¬ 
tions  of  the  quantum  Fourier  transform  (QFT)  can  be 
considered  as  a  generalization  of  finding  an  unknown 
period  of  a  periodic  function,  the  existence  of  these  quan- 
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turn  algorithms  implies  that  any  initialization  of  the  auxil¬ 
iary  qubits  may  be  unnecessary  in  many  quantum 
algorithms. 

We  first  recall  the  Simon  problem  [4]  that  can  be  solved 
in  polynomial  time  on  a  quantum  computer  but  that  re¬ 
quires  exponential  time  on  any  classical  bounded-error 
probabilistic  Turing  machine  if  the  data  are  supplied  as  a 
black  box,  and  we  then  investigate  initialization-free  tech¬ 
niques  for  the  Simon  problem.  We  note  that  there  exists  an 
exact  quantum  polynomial-time  algorithm  for  the  Simon 
problem  [9],  However,  here  we  deal  with  the  original 
Simon  algorithm  that  is  polynomial  time  in  the  expected 
sense. 

For  convenience,  we  use  the  following  notations.  Let 
G  =  (Zj,  ®„)  be  a  group  under  the  binary  operation  ®„, 
which  is  the  bitwise  XOR  operation.  For  a  subset  A  of  G,  let 
|A|  denote  the  cardinality  of  A. 

We  define  a  bilinear  map  G  X  G  — *  Z2  by 


Now  we  present  the  initialization-free  quantum  algo¬ 
rithm  for  the  Simon  problem.  We  first  consider  the  follow¬ 
ing  quantum  algorithm:  (i)  Prepare  an  n-qubit  state  in  the 
state  |0")  as  the  control  qubits  and  an  /t-qubit  state  in  an 
arbitrary  pure  state  1'R)  =  2*a*|/c)  as  the  auxiliary  qubits, 
(ii)  Apply  ®  I.  (iii)  Apply  TJJ.  where 
|y)  t->  |x)  ®  |y  ®„  /(x)).  (iv)  Choose  a  random  n-bit  string 

w  =  (u'o,  W\ . »„-|)  and  apply  Sw  =  <r/"  ®  <r*'  ® 

. . .  ®  on  the  n-qubit  auxiliary  qubits,  that  is.  apply 
I  ®  SK.  (v)  Apply  T/®.  (vi)  Apply  I  ®  Sw.  (vii)  Apply 
AV„  ®  I.  Then  the  resulting  state  becomes 

X  f  X  (-!)•”•/(*)(— (5) 

'  _ve/C 'sec///  > 

We  now  measure  the  first  n-qubit  state.  Then  for  each  y  E 
H1,  the  probability  with  which  we  obtain  y  as  the  mea¬ 
surement  outcome  is 


x  ■  y  =x0y0  ®x,y,  ®  .. .  ®  x„_iy„_i,  (1) 

where x  =  (x0,x„  ..  .,x„_,)  and  y  =  (y0. y, _ _  v„—  i )  are 

elements  in  G  for  Xj,  yj  E  Z2,  and  ®  is  the  XOR  operation, 
which  is  the  addition  modulo  2.  This  bilinear  map  clearly 
satisfies  the  property  that  (x  ®„  y)  •  z  =  x  •  z  ®  y  •  z  for  x, 
y,  and  z  in  G. 

For  a  subgroup  H  of  G,  let 

H 1  =  {x  E  G:x  ■  y  =  0  for  all  y  E  H]  (2) 

denote  the  orthogonal  subgroup  of  H .  We  note  that  the 
quotient  group  G/H  is  well-defined  since  G  is  an  Abelian 
group. 

Let  f:G  —>  G  be  an  arbitrary  two-to-one  map  such  that 
/(x)  =  /(y)  if  and  only  if  x  ®„  v  E  H  where  H  =  {0,  /;}  is 
a  subgroup  of  G  for  some  nonzero  h  E  G.  Then  the  Simon 
problem  is  to  find  the  subgroup  H,  that  is,  to  determine  the 
value  of  h.  The  original  Simon  algorithm  is  as  follows: 
(i)  Prepare  |0")  ®  10").  (ii)  Apply  ~Wn  ®  I.  where  ~Wn  is 
the  /; -qubit  Walsh-Hadamard  transform  defined  as  |x) 
(l/VlGl)2>.eG(-l)-,:'>|y>.  (iii)  Apply  Uf.  (iv)  Apply 
IV,,  ®  I.  Then  the  resulting  state  is 


We  measure  the  first  w-qubit  state.  Then  for  each  y  E  H1, 
the  probability  with  which  we  obtain  y  as  the  outcome  is 

m\y)(y\ «  /) W  =  t^2  Z  1  =  TTY-  <4> 

l°l  xia/H  iGl 

Thus,  after  expected  O(n)  repetitions  of  this  procedure,  at 
least  n  linearly  independent  values  of  y  can  be  collected  so 
that  the  nontrivial  h*  is  uniquely  determined  by  solving  the 
linear  system  of  equations  h*  •  y  =  0.  Then  we  have  h*  = 
h  as  required. 


X  X  (-iF31y>®l/to>-  Q) 

.v-eff1  i6  G/H 


Pw(y)  |G|2 


X  (-ir/o)(-1)x-x 

rec/H 


2 


(6) 


Hence,  the  expected  probability  of  obtaining  y  for  ran¬ 
domly  chosen  w  is 


|U|  wGC  l'J|  wGG  xEG/H 


-]4i  I  (X '-')H 

101  x.x'GG/H'w^G 

x  (—  nu®,v)-g 


Lfw®„/(V)]  1 


(7) 


Since  /  is  one  to  one  on  G/H.  that  is,  /(x)  +  fix')  if  and 
only  if  x  +  x' ,  the  inner  summation  in  (7)  always  vanishes 
for  f(x)  ®„  f(x')  i=  0,  and  the  summation  is  |G|  for 
fix)  ®„  f(x')  =  0.  Thus,  for  each  y  E  H1 ,  the  expected 
probability  (7)  becomes  2/|G|. 

For  any  auxiliary  qubits  of  the  state  pB  =  X 

('RJ,  we  let  p  =  |0n)(0"|  ®  pB.  Then  the  superoperator  A, 
which  maps  p  to  the  quantum  state 


1 

1g[ 


X  A»pAi. 

wBG 


(8) 


where  Aw  =  (X,  ®  7)(7  ®  SJVJU  ®  S„)lL»CWn  ® 
I)  performs  (he  initialization-free  Simon  algorithm,  since 
if  the  first « -qubit  state  in  A (p)  is  measured,  then  it  follows 
from  (7)  that  the  probability  to  obtain  y  as  the  measurement 
outcome  is 


tr  [(lyXyl  ®  7)A(p)]  =  X  =  7 74 • 

|G|  |G| 


(9) 


which  is  the  same  probability  as  that  of  the  original  Simon 
algorithm.  Furthermore,  when  y  is  obtained  as  the  mea¬ 
surement  outcome,  the  resulting  state  after  the  measure¬ 
ment  becomes  |y)(y|  ®  pB.  Therefore,  this  initialization- 
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free  quantum  algorithm  can  efficiently  solve  the  Simon 
problem. 

Similarly,  we  can  present  the  initialization-free  quantum 
algorithm  for  the  period-finding  problem.  We  first  review 
the  original  quantum  algorithm  for  the  period-finding  prob¬ 
lem.  and  then  present  the  initialization-free  period-finding 
algorithm,  which  can  be  considered  as  a  generalization  of 
the  initialization-free  Simon  algorithm. 

Let  /:Z 2-  — *  Zi"  be  a  periodic  function  with  an  un¬ 
known  period  T.  that  is,  f(x)  =  f(x  4-  kT)  for  ()<i< 
L2"/7’J  (or  0  <  1  <  [2n /T\  +  1).  where  [/J  is  the  greatest 
integer  not  more  than  t.  Then  the  period-finding  problem  is 
to  find  T.  Classically,  this  problem  is  known 
to  be  hard  in  the  sense  that  no  classical  algorithms 
that  can  find  T  in  polynomial  time  have  been  found. 
However,  there  exists  a  polynomial-time  quantum  algo¬ 
rithm  for  the  period  finding  [5],  which  is  as  follows: 
Let  N  =  2".  (i)  Prepare  |0">  ®  |0m).  (ii)  Apply  J7  ®  I. 
where  J7  is  the  /V -dimensional  QFT  defined  as  |.r)  /-» 
( 1  e2™xy/N\y).  (iii)  Apply  Ilf.  (iv)  Apply  J7  ® 

I .  Then  the  resulting  state  becomes 

“XXX  ^+^|y>®|/WX  (10) 

V  v_0  y_Q 

where  Ax  =  \_N/T\  or  [N/T J  +  1 .  Now  we  measure  the  first 
//-qubit  state,  and  then  the  probability  of  obtaining  y  as  a 
measurement  outcome  is 


1  T~' 

'■w-S'S 


„2myjT/N 


j~  0 


(ID 


We  note  that  there  are  precisely  T  values  of  y  in 
{0,  1, . . . ,  N  —  1}  satisfying 

T  T 

- <  yTlmodA)  S  — ,  (12) 

2  2 

and  for  each  y  satisfying  (12),  the  probability  of  obtaining 
such  y  can  be  bounded  asymptotically, 

<13) 

77~  T 

Thus,  with  probability  at  least  4/7 r2.  the  measured  value  of 
y  satisfies  the  inequalities  (12);  that  is,  y  satisfies  the 
following  inequalities: 

T 

or  equivalently 


with  k  randomly  chosen  in  {(),  1 . T  —  1}  depending  on 

the  measurement  outcome.  Therefore,  for  sufficiently 
small  T  with  respect  to  N .  the  value  k/T  can  be  efficiently 
extracted  from  the  measured  y/N  by  the  continued  fraction 


IN  N  T  2N’ 


IN 


(15) 


method.  Since  k  and  T  may  be  relatively  prime  with  high 
probability,  we  can  get  the  period  T  in  polynomial  time 
with  respect  to  log/V. 

The  initialization-free  quantum  algorithm  for  the  period¬ 
finding  problem  can  be  presented  by  the  procedure  similar 
to  the  initialization-free  Simon  algorithm.  Instead  of  S„.  = 
<r-°  ®  crz'  ®  . . .  ®  rr?"~‘  for  a  randomly  chosen  /(-bit 
string  w  in  (5),  we  employ  an  w-qubit  unitary  operation 
U„.  for  a  randomly  chosen  ///-bit  string  w  defined  as  |v)  >-* 
e2mwy/M \  _  where  M  =  2m.  We  proceed  with  the  fol¬ 
lowing  quantum  algorithm:  (i)  Prepare  an  //-qubit  state  in 
the  state  |0")  and  an  ///-qubit  state  in  an  arbitrary  pure  state 
I'D  =  1kak\k).  (ii)  Apply  J®I.  (iii)  Apply  Uf. 
(iv)  Choose  a  random  z/z-bit  string  w  and  apply  T lw  on 
the  ///-qubit  state  of  the  auxiliary  qubits,  that  is,  apply  I  ® 
Ti„..  (v)  Apply  T If.  (vi)  Apply  1  ®  1 lw.  (vii)  Apply  J  ® 
I.  Then  the  resulting  state  becomes 

“XfX  X  e27T‘y(x+iT)/N  e2™Kx)/M\\y)  ®  |'P>.  (16) 

N  v-oVr-o  j- o  / 

Hence,  the  probability  with  which  we  can  get  |v)  as  a 
measurement  outcome  of  the  first  //-qubit  state  is 

Pjy)  =-7tI  X  ^  glmyix+i-n/N e2rnwmiM\l_  (17) 

x-fl  j= 0 


By  straightforward  calculations,  we  can  get  the  expected 
probability  of  obtaining  y  for  randomly  chosen  w, 


M  I 


1 

W- 


T- 1  A, 

X  X  elniyiT^N 

,v=0  j=0 


2 


(18) 


As  in  the  initialization-free  Simon  algorithm,  for  any 
///-qubit  state  pB  =  S*/yI'DX'DI-  we  let  p  =  |0”><0"|  ® 
pB.  and  let  the  superoperator  A  be  defined  as 

.  m  - 1 

(19) 

w=0 


where  A„.  =  (J  ®  /)(/  ®  Uw)Vf(I  ®  UJllfd  ®  I). 
Then  the  superoperator  A  can  perform  the  period-finding 
algorithm  efficiently  without  any  initialization  on  the  aux¬ 
iliary  qubits,  since  the  probability  of  obtaining  |y)  satisfy¬ 
ing  (12)  is 


tr[(ly>(y|  ®  J)A(p)] 


£  e^iyjT/N 
j-0 


2,  (20) 


which  is  (he  same  probability  as  that  of  the  original  period¬ 
finding  algorithm  in  (11).  Furthermore,  as  in  the 
initialization-free  Simon  algorithm,  the  resulting  state  after 
the  measurement  becomes  |y)(y|  ®  pB  when  y  is  the  mea¬ 
surement  outcome.  Therefore,  there  exists  an  initialization- 
free  quantum  algorithm  that  can  efficiently  solve  the 
period-finding  problem. 
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In  conclusion,  we  have  investigated  the  initialization- 
free  quantum  algorithms,  which  do  not  require  any  initial¬ 
ization  of  the  auxiliary  qubits  involved  in  the  process  of 
functional  evaluation  and  which  recover  the  initial  state  of 
the  auxiliary  qubits  after  completing  the  computations.  We 
have  considered  quantum  algorithms  for  the  Simon  prob¬ 
lem  and  the  period-finding  problem,  and  have  presented 
the  initialization-free  quantum  algorithms  for  the  prob¬ 
lems,  which  are  as  efficient  as  the  original  ones. 

The  iterative  algorithms  such  as  the  Simon  algorithm 
and  the  period-finding  algorithm  demand  the  storage  of 
auxiliary  qubits  and  the  extra  operations  to  initialize  the 
state  of  the  auxiliary  qubits,  whenever  the  procedure  re¬ 
peats.  However,  if  one  utilizes  our  initialization-free 
technique,  then  the  size  of  the  storage  can  be  reduced 
and  the  extra  operations  can  be  omitted,  since  the  same 
auxiliary  qubits  can  repeatedly  be  used  in  our  algorithms. 
Furthermore,  since  most  known  applications  of  the  QFT 
can  be  considered  as  a  generalization  of  finding  an  un¬ 
known  period  of  a  periodic  function  (for  example,  Shor’s 
factoring  algorithm  [5]  and  Hallgren’s  more  recent  algo¬ 
rithm  for  solving  Pell's  equation  [10]).  the  initialization- 
free  technique  could  be  applied  to  a  lot  of  implementations 
of  quantum  algorithms. 
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In  this  Letter,  we  construct  the  quantum  algorithms  for  the  Simon  problem  and  the  period-finding 
problem,  which  do  not  require  initializing  the  auxiliary  qubits  involved  in  the  process  of  functional 
evaluation  but  are  as  efficient  as  the  original  algorithms.  In  these  quantum  algorithms,  one  can  use 
any  arbitrarily  mixed  state  as  the  auxiliary  qubits,  and  furthermore  can  recover  the  state  of  the 
auxiliary  qubits  to  the  original  one  after  completing  the  computations.  Since  the  recovered  state 
can  be  employed  in  any  other  computations,  we  obtain  that  a  single  preparation  of  the  auxiliary 
qubits  in  an  arbitrarily  mixed  state  is  sufficient  to  implement  the  iterative  procedure  in  the  Simon 
algorithm  or  the  period-finding  algorithm. 

PACS  numbers:  03.67.Lx,  03.65. Ta 


Quantum  computational  algorithms  can  be  executed 
in  parallel  on  superpositions  of  exponentially  many  input 
states,  and  their  outcomes  can  be  properly  measured  by 
virtue  of  quantum  interference.  These  enable  exponential 
speedups  in  the  solutions  of  certain  problems,  and  allow 
one  to  distinguish  between  the  quantum  computational 
complexity  classes  and  the  classical  ones  [1,  2,  3,  4,  5,  6, 
7,  8,  9,  10]. 

It  is  assumed  that  most  quantum  algorithms  require 
some  initialization  at  start-up,  which  is  to  prepare  a  cer¬ 
tain  pure  state  as  an  initial  state.  However,  in  experi¬ 
mentally  realizable  proposals  for  the  implementation  of 
quantum  algorithms,  it  may  be  technically  difficult  to 
prepare  the  initial  pure  state.  Especially,  the  nuclear 
magnetic  resonance  (NMR)  system  is  typically  applied 
to  physical  systems  in  equilibrium  at  room  temperature. 
This  means  that  the  initial  state  of  the  spins  is  nearly 
completely  random,  that  is,  it  is  difficult  to  prepare  pure 
quantum  states  of  nuclear  spins  in  NMR  systems.  Hence, 
it  would  be  interesting  whether  quantum  algorithms  can 
be  efficiently  performed  even  though  the  initial  states  or 
some  parts  of  them  are  not  in  a  specific  pure  state.  If  it 
would  be  possible,  then  the  technical  difficulty  could  be 
settled  to  a  certain  extent,  and  furthermore  if  the  parts  of 
the  initial  state  would  remain  intact  even  after  the  com¬ 
putation,  then  the  parts  could  be  reused  in  any  other 
computations.  We  call  such  a  quantum  algorithm  the 
initialization-free  quantum  algorithm  when  any  quantum 
state  can  be  used  as  the  auxiliary  (target)  qubits  involved 
in  the  functional  evaluation  |r)  <g>  | y)  |ar)  0  \y  +  /(^)) 
for  a  given  function  /,  and  it  can  be  recovered  after  the 
computation. 

In  the  initialization-free  quantum  algorithms,  which 
are  implemented  without  initializing  and  deforming  the 
state  of  the  auxiliary  qubits,  any  qubits  (which  might 
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contain  some  other  useful  information)  can  be  temporar¬ 
ily  used  as  the  auxiliary  qubits,  and  the  initial  state  of 
the  auxiliary  qubits  can  be  recovered  at  the  end  of  the 
computation.  Thus  we  can  compose  the  auxiliary  qubits 
of  any  qubits  regardless  of  whether  they  are  entangled 
with  others  or  being  used  in  another  computational  pro¬ 
cess.  Furthermore,  in  the  case  of  iterative  algorithms,  in 
which  one  needs  to  perform  the  algorithm  several  times 
to  solve  given  problems,  the  initialization-free  quantum 
algorithms  can  be  implemented  with  the  same  auxiliary 
qubits  repeatedly,  while  the  original  iterative  algorithms 
require  the  initial  auxiliary  qubits  of  a  certain  pure  state 
at  each  repetition. 

There  have  been  a  few  research  works  related  to 
the  initialization-free  quantum  algorithms.  Biham  et 
al.  [11,  12]  have  generalized  Grover’s  algorithm  [6]  by  al¬ 
lowing  for  an  arbitrary  initial  amplitude  distribution,  and 
have  shown  that  Grover’s  algorithm  (or,  a  large  class  of 
Grover-type  algorithms)  is  robust  against  modest  noise  in 
the  amplitude  initialization  procedure.  Parker  and  Ple- 
nio  [13]  found  that  one  pure  qubit  and  an  initial  supply  of 
log2  N  qubits  in  an  arbitrarily  mixed  state  are  sufficient 
to  implement  Shor’s  quantum  factoring  algorithm  [5]  effi¬ 
ciently,  where  the  idea  of  using  one  pure  qubit  and  other 
mixed  qubits  as  the  initial  state  was  first  introduced  by 
Knill  and  Laflamme  [14].  Their  result  implies  that  the 
controlled  unitary  transformations  in  Shor’s  algorithm 
can  be  implemented  without  any  initialization  of  the  aux¬ 
iliary  qubits,  while  the  auxiliary  qubits  cannot  be  left  in 
the  initial  state.  Subsequently,  Chi  et  al.  [15]  have  pre¬ 
sented  a  quantum  algorithm  to  implement  an  oracle  com¬ 
puting  \x)  e2irifW/M  |ar)  for  /  :  Z,y  — >  Z,\/  by  making 
use  of  an  oracle  of  the  form  |ar)  <S>  \ y)  >  |t)  <g>  \y  +  f{x)) 
without  setting  the  auxiliary  qubits  to  a  definite  state  be¬ 
fore  the  computation,  and  have  shown  that  generalized 
Deutsch-Jozsa  algorithms  can  be  implemented  without 
any  initialization  of  the  auxiliary  qubits  when  an  oracle 
computing  Uf  :  \x)  |y)  *  |t)  <8  \y  +  f{x))  is  employed. 

In  this  Letter,  we  deal  with  two  problems,  the  Si¬ 
mon  problem  [4]  and  the  period- finding  problem  [5], 
which  can  be  solved  efficiently  by  the  quantum  com- 
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puter,  and  present  the  initialization-free  quantum  algo¬ 
rithms  for  these  problems.  Since  most  of  known  “expo¬ 
nentially  fast”  applications  of  the  quantum  Fourier  trans¬ 
form  (QFT)  can  be  considered  as  a  generalization  of  find¬ 
ing  unknown  period  of  a  periodic  function,  the  existence 
of  these  quantum  algorithms  implies  that  any  initializa¬ 
tion  of  the  auxiliary  qubits  may  be  unnecessary  in  many 
quantum  algorithms. 

We  first  recall  the  Simon  problem  [4]  that  can  be  solved 
in  polynomial  time  on  a  quantum  computer  but  that  re¬ 
quires  exponential  tune  on  any  classical  bounded-error 
probabilistic  Turing  machine  if  the  data  is  supplied  as 
a  black  box,  and  we  then  investigate  initialization-free 
techniques  for  the  Simon  problem.  We  note  that  there 
exists  an  exact  quantum  polynomial-time  algorithm  for 
the  Simon  problem  [9],  However,  we  here  deal  with  the 
original  Simon  algorithm  which  is  polynomial-time  in  the 
expected  sense. 

For  convenience,  we  use  the  following  notations.  Let 
G  =  (Z’j ,  ©„)  be  a  group  under  the  binary  operation  ©n, 
which  is  the  bitwise  XOR  operation.  For  a  subset  A  of 
G,  let  |j4|  denote  the  cardinality  of  A. 

We  define  a  bilinear  map  G  x  G  — >  Z2  by 

x  ■  y  =  xoyo  ©USA  ©  ■  ■  -©Zn-iJ/n-i  (1) 

where  x  =  (a;0,a;i,  ■  ■  ■  ,x„_i)  and  y  =  (yo,yi,  ■  ■  ■  ,yn- 1) 
are  elements  in  G  for  Xj,yj  g  Z2,  and  ©  is  the  XOR 
operation,  which  is  the  addition  modulo  2.  This  bilinear 
map  clearly  satisfies  the  property  that  ( x  ©„  y)  ■  z  = 
x  •  z  ©  y  ■  z  for  x,  y  and  2  in  G. 

For  a  subgroup  H  of  G,  let 

H±  =  {xeG:xy  =  0  for  all  y  g  H}  (2) 

denote  the  orthogonal  subgroup  of  H.  We  remark  that 
the  quotient  group  G/H  is  well-defined  since  G  is  an 
abelian  group. 

Let  /  :  G  — »  G  be  an  arbitrary  two-to-one  map  such 
that  f(x)  =  f(y)  if  and  only  if  x  ®n  y  E  H  where  H  = 
{0,  h}  is  a  subgroup  of  G  for  some  nonzero  h  E  G.  Then 
the  Simon  problem  is  to  find  the  subgroup  H,  that  is,  to 
determine  the  value  of  h.  The  original  Simon  algorithm 
is  as  follows:  (i)  Prepare  |0n)  0  |0n).  (ii)  Apply  Wn  <S> 
X ,  where  Wn  is  the  n-qubit  Walsh-Hadamard  transform 
defined  as  |ar)  t->  (l/i/fG|) Eygo(“1)X'!'l!/>-  M  APPly 


Uf.  (iv)  Apply  W„  <%>  X.  Then  the  resulting  state  is 

14)4^  E  (-irBiw)® i/(*)>.  (3) 

1  T|  yeH-L  xeG/H 

We  measure  the  first  n-qubit  state.  Then  for  each 
y  E  H^~,  the  probability  with  which  we  obtain  y  as  the 
outcome  is 


<*l(lv)<vl®Z)l*>=|4a  E  1  =  77' 

1  1  xeG/H  '  * 

Thus,  after  expected  0(n)  repetitions  of  this  procedure, 
at  least  n  linearly  independent  values  of  y  can  be  collected 
so  that  the  nontrivial  h*  is  uniquely  determined  by  solv¬ 
ing  the  linear  system  of  equations  h*  ■  y  =  0.  Then  we 
have  h*  =  h  as  required. 

Now  we  present  the  initialization-free  quantum  algo¬ 
rithm  for  the  Simon  problem.  We  first  consider  the  fol¬ 
lowing  quantum  algorithm:  (i)  Prepare  an  n-qubit  state 
in  the  state  |0n)  as  the  control  qubits  and  an  n-qubit 
state  in  an  arbitrary  pure  state  |\&)  =J2kQk  |fc)  as  the 
auxiliary  qubits,  (ii)  Apply  Wn  ®  X.  (iii)  Apply 
where  U ®  :  |ar)  <g>  \ y)  *— >  |ar)  <g>  | y0„  f(x)).  (iv)  Choose  a 
random  n-bit  string  w  =  (wo,wi,  -  •  •  ,ic„_i)  and  apply 
Sw  =  <7™°  <S>  &zX  ®  ®  (?z n_1  on  the  n-qubit  auxiliary 

qubits,  that  is,  apply  X  <$)SW.  (v)  Apply  U.^ .  (vi)  Apply 
X  <g>  Sw.  (vii)  Apply  <8>  X.  Then  the  resulting  state 
becomes 


iSr  E  ( E  (-» 

1  1  y€H X  \xeG/H 


(5) 


We  now  measure  the  first  n-qubit  state.  Then  for  each 
y  E  H±,  the  probability  with  which  we  obtain  y  as  the 
measurement  outcome  is 


Pw(y)  = 


4 

W 


|2 


52  (-l)U“/(:r)(-lf!' 

\x€G/H 


(6) 


Hence,  the  expected  probability  of  obtaining  y  for  ran¬ 
domly  chosen  w  is 


\G\ 


E  p »(») 

weG 


—  Y 


52  (-i)u’f':r)(-i)ii 

x€G/H 


4  y  [  y  (_i)^  (/(^)e./(i'))  | 

^  x,x'eG/H  \w€G 


r 


(7) 


Since  /  is  one-to-one  on  G/H,  that  is,  f(x)  ^  f(x')  if  and  only  if  x  ^  x',  the  inner  summation  in  (7)  always 
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vanishes  for  f(x)  0n  f{x')  ^  0,  and  the  summation  is 
|G|  for  f(x)  0n  f(x')  =  0.  Thus,  for  each  y  €  H-1,  the 
expected  probability  (7)  becomes  2/|G|. 

For  any  auxiliary  qubits  of  the  state  pB  = 
Pk-\^kj(^k\,  we  let  p  =  |0n)(0,l|  pB-  Then  the  su¬ 
peroperator  A,  which  maps  p  to  the  quantum  state 

e  -wAt,  (8) 

1  1  weG 

where  Aw  =  (VV„  ®X){X  0  Sw)Uf(l®  Sw)U®{Wn  0  X), 
performs  the  initialization- free  Simon  algorithm,  since  if 
the  first  7i-qubit  state  in  A(p)  is  measured,  then  it  follows 
from  (7)  that  the  probability  to  obtain  y  as  the  measure¬ 
ment  outcome  is 

tv[(\y)(y\  xl)A(p)\  =  A  £  pw(y)  =  E  (9) 

'  '  weG 


which  is  the  same  probability  as  that  of  the  original 
Simon  algorithm.  Furthermore,  when  y  is  obtained 
as  the  measurement  outcome,  the  resulting  state  after 
the  measurement  becomes  \y) (y\  0  pB-  Therefore,  this 
initialization-free  quantum  algorithm  can  efficiently  solve 
the  Simon  problem. 

Similarly,  we  can  present  the  initialization-free  quan¬ 
tum  algorithm  for  the  period-finding  problem.  We  first 
review  the  original  quantum  algorithm  for  the  period¬ 
finding  problem,  and  then  present  the  initialization-free 
period-finding  algorithm,  which  can  be  considered  as  a 
generalization  of  the  initialization-free  Simon  algorithm. 

Let  /  :  Z2™  — >  Z2"*  be  a  periodic  function  with 
an  unknown  period  T,  that  is,  f(x)  =  f(x  +  kT)  for 
0  <  k  <  [2n/T\  (or,  0  <  k  <  [2n/T\  +  1).  Then 
the  period-finding  problem  is  to  find  T.  Classically,  this 
problem  is  known  to  be  hard  in  the  sense  that  no  clas¬ 
sical  algorithms  which  can  find  T  in  polynomial  time 
have  been  found.  However,  there  exists  a  polynomial¬ 
time  quantum  algorithm  for  the  period  finding  [5],  which 
is  as  follows:  Let  N  =  2n.  (i)  Prepare  |0n)  0  |0m).  (ii) 
Apply  F®X,  where  F  is  the  iV-dimensional  QFT  defined 
as  I*)  ~  (l/VN)Zy=o^ixy/N\y)-  (Hi)  Apply  Uf.  (iv) 

Apply  J-  $5  T.  Then  the  resulting  state  becomes 

jf  E  E  E  e™«*+™N\y)  9  | /(*))  (10) 

y= 0  x=0  j=  0 


where  Ax  =  [N/T J  or  [N/T\  +  1.  Now  we  measure  the 
first  71-qubit  state,  and  then  the  probability  of  obtaining 
y  as  a  measurement  outcome  is 


P(y) 


1 

m 


T- 1 


E 


V'  e2TiyjT/N 
3=0 


(11) 


We  note  that  there  are  precisely  T  values  of  y  in 
{0, 1,  •  •  •  ,  N  —  1}  satisfying 


(12) 


3 


and  for  each  y  satisfying  (12),  the  probability  of  obtaining 
such  y  can  be  bounded  asymptotically, 

P(y)  >  (13) 

Thus,  with  probability  at  least  4/7T2,  the  measured  value 
of  y  satisfies  the  inequalities  (12),  that  is,  y  satisfies  the 
following  inequalities: 


k  1  y  k  1 
_ _ _  <  < _ l _ 

T  2N  ~  N  ~  T  2AT 

or  equivalently 


y_ 

N 


(14) 


(15) 


with  k  randomly  chosen  in  {0, 1,  •  •  •  ,  T  —  1}  depending 
on  the  measurement  outcome.  Therefore,  for  sufficiently 
small  T  with  respect  to  AT,  the  value  k/T  can  be  effi¬ 
ciently  extracted  from  the  measured  y/N  by  the  contin¬ 
ued  fraction  method.  Since  k  and  T  may  be  relatively 
prime  with  high  probability,  we  can  get  the  period  T  in 
polynomial  time  with  respect  to  log  A  . 

The  initialization-free  quantum  algorithm  for  the 
period-finding  problem  can  be  presented  by  the  proce¬ 
dure  similar  to  the  initialization-fee  Simon  algorithm.  In¬ 
stead  of  Sw  =  a™0  0  a™1  0  •  •  •  0  <Jz  n_1  for  a  randomly 
chosen  n- bit  string  w  in  (5),  we  employ  an  772-qubit  uni¬ 
tary  operation  Uw  for  a  randomly  chosen  m-bit  string  w 
defined  as  |t/)  e2*iwy'M\ -y),  where  M  =  2m.  We  pro¬ 
ceed  with  the  following  quantum  algorithm:  (i)  Prepare 
an  77-qubit  state  in  the  state  |0”)  and  an  777-qubit  state  in 
an  arbitrary  pure  state  |4/)  =  atk\k).  (ii)  Apply  F 0Z. 
(iii)  Apply  IA f .  (iv)  Choose  a  random  777- bit  string  w  and 
apply  Uw  on  the  777-qubit  state  of  the  auxiliary  qubits, 
that  is,  apply  X  0  Uw.  (v)  Apply  Uf.  (vi)  Apply  X  ®UW. 
(vii)  Apply  F  0  X.  Then  the  resulting  state  becomes 


.  .V  -  l  IT  - 1  Ax  - 1 

^E  IE  E 


y=0  \  x=0  j= 0 


|y>  ®  l*>- 

(16) 


Hence,  the  probability  with  which  we  can  get  |y)  as  a 
measurement  outcome  of  the  first  72-qubit  state  is 


P^y)  =  w 


T- 1  Ax-1 

EE  e2iriy(z+jT)/N  e2TTiuif(x)/M 

x=0  j=  0 


(17) 


By  straightforward  calculations,  we  can  get  the  expected 
probability  of  obtaining  y  for  randomly  chosen  w, 


M  —  1 

M  E 


1 

w 


T- 1 


E 


|2 


\<yT  (mod  1 V)  <  T~, 


;2TiyjT/N 


(18) 
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As  in  the  initialization-free  Simon  algorithm,  for  any 
m-qubit  state  pg  =  we  ^  P  =  0") (0n  |  X 

pg.  and  let  the  superoperator  A  be  defined  as 

M— 1 

^17  (19) 

M  U)=0 

where  Au,  =  (F ®1)(1  ®Uw)Uf(ll 2 3 * * * * 8 9 10g>Uu:)Uf(J:',g>l).  Then 
the  superoperator  A  can  perform  the  period-finding  al¬ 
gorithm  efficiently  without  any  initialization  on  the  aux¬ 
iliary  qubits,  since  the  probability  of  obtaining  |  y)  satis¬ 
fying  (12)  is 


tr  [(\y)(y\  ®I)A(p)] 


1 


T—l 


E 


e2iriyjT/N 

3=0 


,  (20) 


winch  is  the  same  probability  as  that  of  the  original 
period-finding  algorithm  in  (11).  Furthermore,  as  in  the 
initialization-free  Simon  algorithm,  the  resulting  state 
after  the  measurement  becomes  |y)  (y  j  g>  pg  when  y 
is  the  measurement  outcome.  Therefore,  there  exists 
an  initialization-free  quantum  algorithm  which  can  ef¬ 
ficiently  solve  the  period-finding  problem. 

In  conclusion,  we  have  investigated  the  initialization- 
free  quantum  algorithms,  which  do  not  require  any  ini¬ 
tialization  of  the  auxiliary  qubits  involved  in  the  process 


4 

of  functional  evaluation,  and  which  recover  the  initial 
state  of  the  auxiliary  qubits  after  completing  the  compu¬ 
tations.  We  have  considered  quantum  algorithms  for  the 
Simon  problem  and  the  period-finding  problem,  and  have 
presented  the  initialization-free  quantum  algorithms  for 
the  problems,  which  are  as  efficient  as  the  original  ones. 

The  iterative  algorithms  such  as  the  Simon  algorithm 
and  the  period-finding  algorithm  demand  the  storage  of 
auxiliary'  qubits  and  the  extra  operations  to  initialize  the 
state  of  the  auxiliary  qubits,  whenever  the  procedure  re¬ 
peats.  However  if  one  utilizes  our  initialization-free  tech¬ 
nique  then  the  size  of  the  storage  can  be  reduced  and  the 
extra  operations  can  be  omitted,  since  the  same  auxiliary' 
qubits  can  repeatedly  be  used  in  our  algorithms.  Further¬ 
more,  since  most  known  applications  of  the  QFT  can  be 
considered  as  a  generalization  of  finding  unknown  period 
of  a  periodic  function  (for  example,  Shor’s  factoring  algo¬ 
rithm  [5]  and  Hallgren’s  more  recent  algorithm  for  solv¬ 
ing  Pell’s  equation  [10]),  the  initialization-free  technique 
could  be  applied  to  a  lot  of  implementations  of  quantum 
algorithms. 

The  authors  would  like  to  thank  D.  A.  Lidar  and 
M.  Grassl  for  helpful  comments.  D.P.C.  was  supported 
by  a  Korea  Research  Foundation  Grant  (KRF-2004-059- 
C00060)  and  by'  Asian  Office  of  Aerospace  Research  and 
Development  (AOARD-04-4003). 


[1]  D.  Deutsch,  Proc.  R.  Soc.  A  400,  97  (1985);  D.  Deutsch 
and  R.  Jozsa,  Proc.  R.  Soc.  A  439,  553  (1992). 

[2]  A.  Berthiaume  and  G.  Brassard.  J.  Mod.  Optic.  41,  2521 
(1994). 

[3]  E.  Bernstein  and  U.  Vazirani,  SIAM  J.  Comput.  26,  1411 
(1997). 

4]  D.  R.  Simon.  SIAM  J.  Comput.  26,  1474  (1997). 

5]  P.  W.  Shor,  SIAM  J.  Comput.  26,  1484  (1997). 

6]  L.  K.  Grover,  Phys.  Rev.  Lett.  79,  325  (1997). 

7]  M.  Boyer,  G.  Brassard,  P.  Hover,  and  A.  Tapp, 
Fortschritte  der  Phy'sik  46,  493  (1998). 

[8]  C.  H.  Bennette,  E.  Bernstein,  G.  Brassard,  and  U.  Vazi¬ 
rani,  SIAM  J.  Comput.  26,  1510  (1997). 

[9]  G.  Brassard  and  P.  I  lover,  quant-ph/9704027,  1997. 

[10]  S.  Hallgren,  Proceedings  of  the  thiry-fourth  annual  ACM 

Symposium  on  Theory'  of  Computing,  2002,  pp.  653-658; 
R.  Jozsa,  quant-ph/0302134,  2003. 


[11]  D.  Biron,  O.  Biham,  E.  Biham,  M.  Grassl,  and  D.  A.  Li¬ 
dar,  Lecture  Notes  in  Computer  Science  (Springer-Velag, 
Berlin,  1998)  1509,  140  (1999);  E.  Biham,  O.  Biham, 
D.  Biron,  M.  Grassl,  and  D.  A.  Lidar,  Phys.  Rev.  A  60, 
2742  (1999);  E.  Biham,  O.  Biham,  D.  Biron,  M.  Grassl, 
D.  A.  Lidar,  and  D.  Shapira,  Phys.  Rev.  A  63,  012310 
(2000). 

[12]  E.  Biham  and  D.  Kenigsberg,  Phys.  Rev.  A  66,  062301 

(2002). 

[13]  S.  Parker  and  M.  B.  Plenio,  Phys.  Rev.  Lett.  85,  3049 

(2000). 

[14]  E.  Knill  and  R.  Laflamme,  Phys.  Rev.  Lett.  81,  5672 
(1998). 

[15]  D.  P.  Chi,  J.  Kim,  and  S.  Lee,  J.  Phy's.  A  34,  5251  (2001); 
J.  Kim,  S.  Lee,  and  D.  P.  Chi,  J.  Phys.  A  35,  6911  (2002). 


